We have tested a scripted method for updating the keys which works but ideally we want to deploy the policy through Intune. The policy we created with the setting

Enable Secureboot Certificate Updates 

(Enabled) Initiates the deployment of new secure boot certificates and related updates.

But on both 24H2 and 25H2 this seems to do nothing. Will this be usable soon?